Picky Pear — Privacy Policy

1. Who operates Picky Pear

Picky Pear is published and operated by Sergei Kornilov, Lagkada 57, 54629 Thessaloniki, Greece ("we", "us", "our"). We are the data controller for personal data described in this policy. For privacy, support, and legal requests contact us at [email protected].

2. Data we collect

• Account data — email address, display name, optional profile photo, and a one-way password hash stored in our Convex authentication backend. If you sign in with Google or Apple, we receive the profile information that provider makes available, such as your name, email address (which may be an Apple private relay address), and profile photo.
• Profile preferences — app language, the languages you understand (used to personalize your poll feed), notification preferences, and appearance settings.
• Content you create — polls, answer options, votes, comments, Pearfect questions and answers, and any images or videos you upload.
• Guest activity — if you vote on a public poll without signing in, we issue a random guest identifier, store it on your device, and associate your votes with it until it expires or you clear app data. To prevent automated abuse, we temporarily process a one-way protected value derived from your IP address for rate limiting; we do not store the raw IP address in the application database. Guest voting and account registration may be protected by Cloudflare Turnstile, a bot check that receives your IP address and technical signals about your browser from Cloudflare; it does not use cookies for advertising and does not track you across other websites.
• Device and push data — if you enable notifications, we store a push token for your mobile device, or for web push a subscription endpoint and encryption keys provided by your browser. We also store basic session data needed for the Service to function.
• Usage data — activity needed for app features, such as which polls you voted on, view counts, last-seen timestamps, daily activity summaries, and online presence used for in-app features (for example, Pear Twins matching). We also collect product analytics events (for example screen views, poll creation, votes, and comments) to understand how the Service is used and improve it. Our analytics provider uses your IP address to determine an approximate location (country and city) for these events.
• Diagnostics — crash and error reports so we can keep the Service stable. These may include device and app version details and technical breadcrumbs around a failure; we do not intentionally include message contents as diagnostic payload. In a sample of app sessions we also measure performance, such as app launch time and slow or frozen screens.
• Support messages — if you write to us in the app, we store your messages, any screenshots you attach, and, unless you switch it off, technical details (app version, device model, operating system, language, and the screen you were on). If you are not signed in, you can leave an email address so we can reply. We use this only to answer you and fix problems, and it is deleted with your account.
• Pearsona data — if you generate a Pearsona card, we build a summary of your voting and commenting activity in the app and send it to our third-party AI provider, Anthropic (Claude) to create the card. We ask for your explicit consent in the app before the first time this happens, and we may store that summary with the generated card so you can view it again. Votes on anonymous polls are never included.
• Content sent for automated moderation — text you post (polls, answer options, comments), images you upload, and still frames sampled from videos you upload are sent to OpenAI's Moderation API to check them for serious harm (threats, severe hate speech, sexual content involving minors, pornography, graphic gore). This is an automated safety check that runs on content you publish; it is not used to build a profile of you, and OpenAI does not use this content to train its models.

We do not collect your date of birth, precise location, contacts, or advertising identifiers. The Service contains no third-party advertising and does not track you across other companies' apps or websites (no App Tracking Transparency / IDFA use).

3. How we use data

• to provide the Service: accounts, polls, votes, comments, follows, notifications, and social features such as Pear Twins;
• to personalize your feed based on your language preferences;
• to generate Pearsona cards when you request them and have consented to the transfer to our AI provider;
• to keep the community safe through automated moderation of content you publish (see the provider table below), user reports, blocking, and human review of reported or flagged content;
• to understand product usage (which features people use, where they drop off) and improve the Service;
• to diagnose crashes and technical failures;
• to translate poll content into your language (poll text may be sent to Google Translation services for this purpose);
• to respond to support requests and enforce our Terms of Service.

Legal bases where GDPR applies: performance of a contract (providing the Service), legitimate interests (safety, moderation, service improvement, diagnostics, product analytics), and consent (push notifications, and the transfer of your activity summary to our AI provider for Pearsona cards), which you can withdraw at any time in system settings, in-app notification settings, or by contacting us at [email protected]. Pearsona summaries are sent when you request a card; if you no longer want new summaries sent, do not request more cards and contact us to withdraw your consent. Withdrawal does not affect the lawfulness of earlier processing.

4. Who processes your data

These providers process data on our behalf under their own terms and data-processing agreements. We do not sell your personal data and do not share it with advertisers. Data may be processed on servers outside your country; where required, transfers are protected by standard contractual clauses or equivalent safeguards.

5. What other users see

Your display name, avatar, polls, comments, follower/following lists, and vote counts on public polls are visible to other users of the Service. On polls you mark as anonymous, other users see vote counts but not who voted or what they chose. On regular polls, other registered users can see who voted and their choices. Public poll links can be viewed by anyone with the link, including people without an account. Pearfect creators can see submitted answers and results; shared Pearfect links and result pages can be opened by people who have the link.

6. Cookies and local storage (web)

When you use Picky Pear on the web, Better Auth uses strictly necessary cookies to keep you signed in and protect your account, and Cloudflare's bot protection may set its own strictly necessary cookies to confirm that a request comes from a real browser. We do not use cookies for advertising. We also use local storage for session information, guest identifiers, language preferences, and product analytics. You can control cookies and local storage through your browser settings; disabling them may prevent you from signing in or voting as a guest on the web.

7. Retention and deletion

We keep your data while your account is active. You can delete your account at any time in the app (Profile → Settings → Account → Delete account) or as described on the account deletion page. Deletion removes your account data, profile, push tokens, and personal identifiers, and removes or anonymizes your content, within 30 days. An anonymized account record and anonymized answers in other people’s Pearfect sets may remain to preserve shared results. We may retain limited records where required by law and moderation records needed to keep the platform safe.

8. Children

The Service is not directed to children under 13, and we do not knowingly collect personal data from children under 13. In some countries (including parts of the European Union) you must be 16 or older to use online services without parental consent; if that applies where you live, you may use the Service only with a parent or guardian's permission. If you believe a child is using the Service in violation of these rules, contact us and we will delete the account.

9. Your rights

Depending on where you live (including under GDPR and the California Consumer Privacy Act), you may have the right to access, correct, export, or delete your personal data, to object to or restrict processing, and to lodge a complaint with a supervisory authority. In Greece, the supervisory authority is the Hellenic Data Protection Authority (www.dpa.gr).

Access, correction, and deletion: use the in-app account settings (including account deletion) or email [email protected] from the address linked to your account.

Data export: we do not offer an automatic in-app export tool at this time. To receive a copy of your personal data, email [email protected] from the address linked to your account with the subject "Data export request". We will verify your identity and respond within 30 days with a readable copy of the data we hold about you.

We do not discriminate for exercising your rights, and we do not sell or "share" personal data as defined by the CCPA.

10. Illegal content and authorities (EU)

If you believe content on the Service is illegal, use the in-app report tools or email [email protected]. Law-enforcement and regulatory authorities may contact us at the same address regarding content on the Service.

11. Changes

We may update this policy from time to time. We will post the updated version here; for material changes we will provide notice in the app.

12. Contact

Data controller: Sergei Kornilov, Lagkada 57, 54629 Thessaloniki, Greece

Privacy questions and requests: [email protected]